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Unit comprising data memory card and reading/writing device 

Abstract 

A description is given of a method of extending the period of validity of smart cards, 
without the said cards having to be surrendered by their owner. For this purpose, use 
is made of reading/writing devices which are installed near smart card users and, by 
means of extension passwords sent to the owner by a central issuing agency, extend the 
date of validity of the smart card. 



(Fig. 1) 
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Patent claims 

1. Unit comprising data memory card (1) and at least one reading/writing 
device (2), it being possible for the card (1) to be read from and/or written to 
by the reading/writing device (2) only during a defined, extendable interval of 
use (validity) and it being possible for the period of validity of the card (1) to 
be extended by means of an extension password (VEC) related to the card, 
characterized by the following features: 

a) the card has 

al) a memory area on which a code (IC) individualizing the card is stored, 

a2) a memory area on which a further code (VC), which characterizes a 
limited validity, is stored, and 

a3) a memory area (DF) as the actual data memory area; 

b) at least one reading/writing device, which 

bl) has recognition programs (R/IC, R/VC) for the individualizing code (IC) 
and the validity code (VC), 

b2) has access to a database (Date, CV), which characterizes the already 
used validity of the card, 

b3) has a program which, on the basis of a comparison of the database 
(Date, CV) with the validity code (VC), either rejects the card as invalid 
or activates a reading/writing program for the actual memory area (DF); 



and 
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at least one reading/writing device, which in addition to feature bl) has: 



10 . 2. 
3. 

15 4. 
5. 

20 

6. 



cl) a recognition program for an extension password (VEC) and 

c2) a program for processing the extension password (VEC) with the 
individualizing code (IC) and/or the validity code (VC) for generating a 
new validity code (nVC) and also 

c3) means for writing the new validity code (nVC) to the memory area for 
the validity code (VC), 

it being possible for the reading/writing devices according to b) and c) to be 
integrated in a single device. 

Unit according to Claim 1, the database (Date) being a calendar clock which 
cannot be manipulated and is integrated into the reading/writing device and the 
validity code (CV) characterizing a time period of validity. 

Unit according to Claim 2, the calendar clock being a radio-controlled standard- 
time calendar clock. 



Unit according to Claim 1, the validity code (CV) characterizing the permissible 
intensity of use of the card (1) and the database J^CV) characterizing the 
accumulated, actual use of the card (1), the database (CV) being stored in a 
memory area of the card (1) and being updated each time the card (1) is used. 

Unit according to one of Claims 1 to 4, the memory card (1) being an optical 
memory card- 
Unit according to one of Claims 1 to 4, the memory card (1) being a chip card. 



7. 



Unit according to one of Claims 1 to 6, the memory card (1) being a hybrid 
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card which has a chip memory area and an optical memory area. 

8. Unit according to Claim 7, at least the individualizing code (IC) and the validity 
code (VC) being stored in the chip memory area. 
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Unit comprising data memoir card and reading/writing device 

5 Personal data carrier cards, which have an electronically readable data carrier in the 
form of a magnetic memory, a chip memory or an optical memory area, are used 
diversely as access-authorization cards, credit cards, debit cards (for example phone 
cards) or cards for health insurance funds. Furthermore, it has recently been repeatedly 
proposed to utilize the high storage capacity of optical memory cards (Optical Memory 

10 Card = OMC) or hybrid cards (Optical Memory Chip Card = OMCC) to store personal 
data in encoded form, in particular medical information, in a format you can take with 
you all the time - so-called smart cards* 

The usability of such card systems depends on the existence and maintenance of a not 
inconsiderable infrastructure of reading/writing devices, which have to be maintained 
15 by the card users. 

The cards are therefore in each case issued by the companies making the cards and the 
necessary infrastructure available in return for a user fee foirarlimited amount of use, - 
the cards containing information on the authorized amount of use and losing their 
validity once the amount of use has been used up. In this case, the amount of use may 
20 be defined by a period of use, defined by an expiry date, or by an intensity of use, for 
example frequency of use, or a value of the card, which is stored in the card and is 
updated each time it is used (residual value). 

The amount of use of the card is respectively extended by making available a new 
card, the old card becoming invalid. 
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This revalidation process is no longer economical, for reasons of cost alone, if the body 
of the card itself is of a technically complex design, for example in the form of an 
optical memory card, a chip card comprising a plurality of chips or in the form of 
hybrid optical memory chip cards* In addition, liquidation of the old card is ruled out 
5 if it serves for storing personal data, for example medical data, since the stored data are 
lost in the liquidation. Sending in the card for revalidation by the company making it 
available is likewise ruled out, since the card would not be available during the 
revalidation period and there are objections from the point of view of data protection 
rights. 

10 There is therefore a need for a method of revalidating cards in an off-line process in 
which the card on the one hand remains with the user and on the other hand improper, 
unauthorized revalidation can be reliably ruled out. 

It is proposed according to the invention to cany out the revalidation of the card by the 
card user himself with the aid of a revalidation password sent by the card-issuing 
15 agency and individualized for the respective card. For this purpose, it is necessary to 
design both the card and the reading/writing devices in a specific way. 

The subject of the present invention is a unit comprising data memory card 1 and at 
least one reading/writing device 2, it being possible for the card 1 to be read from 
and/or written to by the reading/writing device 2 only during a defined, extendable 
20 interval of use (the validity) and it being possible for the .period of validity of the 
card 1 to be extended by means of an extension password (VEC) related to the card, 
which unit is characterized by the following features: 

a) the card has 

al) a memory area on which a code IC individual izi n g the card is stored, 

25 a2) a memory area on which a further code VC, which characterizes a limited 
validity, is stored, and 
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a3) a memory area DF as the actual data carrier area; 
b) at least one reading/writing device, which 

bl) has recognition programs R/IC, R/VC for the individualizing code IC and the 
validity code VC, 

b2) has access to a database Date, CV, which characterizes the already used validity 
of the card, 



b3) has a program which, on the basis of a comparison of the database Date, CV 
with the validity code VC, either rejects the card as invalid or activates a 
reading/writing program for the actual memory area DF; 



and 

c) at least one reading/writing device, which in addition to feature bl) has: 

cl) a recognition program for an extension password VEC and 

c2) a program for processing the extension password VEC with the individ ualizin g 
code IC and/or the validity code VC for generating the new validity code nVC 
and also _ 

c3) means for writing the new validity code nVC to the memory area for the 
validity code VC, 



it being possible for the reading/writing devices according to b) and c) to be integrated 
in a single device. 

The method for making the card available and revalidating it using the unit according 
to the invention, comprising card and reading/writing device, can be carried out as 
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The card is made available for the first time with an authorized amount of initial use 
stored in the memory area of the card for the validity code VC With each use of the 
card, the remaining residual amount of use or the validity of the card is checked. 

5 Within a predefined, remaining residual amount of use, the card holder is notified of a 
revalidation password VEC by the card-issuing agency in return for payment of the 
revalidation fee by the said card holder. During subsequent use, i.e. input of the card 
into a reading/writing device, the revalidation password is entered into the 
reading/writing device and the revalidation of the card is performed by the 

10 reading/writing device. 

In this arrangement, it may be provided that the revalidation password is sent in the 
form of a sequence of figures and/or letters which can be read in plain text, which is 
then read into the reading/writing device via a keyboard, or else in the form of a cheap 
electronically readable revalidation card, only designed for one-time use, which is 
1 5 either pushed into an additional reading slot of the reading/writing device or is pushed 
into the single reading slot in alternation with the card to be revalidated. 

Whenever the respectively authorized amount of use is defined by a time period of use, 
the database Date is preferably made available by a calendar clock which cannot be 
manipulated and is integrated into the reading/writing device. It may preferably be a 
20 radio-controlled standard-time clock. _ _ 

Whenever the respectively authorized amount of use is defined by an intensity of use, 
for example a number of acts of use or a prepaid amount of monetary value, the 
database for determining the still authorized residual amount of use CV is integrated 
into the card and is updated with every use, Le. every time the card is pushed into the 
25 reading/writing device, on the basis of the use which has taken place. 

The invention is explained in more detail below with reference to the attached figures: 
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Fig. 1 shows a unit comprising card and reading/writing device in the case of an 
authorized amount of use defined by a time period of use, for explaining the 
procedure of using the card. 

Fig. 2 shows a unit according to Fig. 1 for explaining the revalidation. 

Fig. 3 shows a unit according to Fig. 1, the authorized amount of use being defined by 
an intensity of use. 

In Fig. 1, the card 1 and the reading/writing device 2 are schematically represented. 
The card has a first memory area 1 1 for the storage of the code IC individualizing the 
card, a second memory area 12 for the storage of the validity code VC and a third 
memory area 13 for receiving the actual information content BF of the card. If the 
card 1 is, for example, a personal card for storing medical information, it would be 
possible each time the doctor is visited for the memory area 13 to be read, for 
providing the medical prehistory, and for additional diagnoses, therapy and 
prescriptions etc. to be stored by means of reading/writing devices 2 installed in the 
doctor's practice. 

The memory areas 11 to 13 may be designed in the form of one or more electronic 
chips arranged on the card or in the form of laser-readable, optical memory areas. In 
the case of so-called hybrid cards, the memory areas 1 1 and 12 may be designed in the 
form of an electronic chip which has additional cryptog raphic progr ams and the 
memory area 13 may be designed in the form of an optical memory area. 

The reading/writing device 2 has a recognition program R/IC for reading the code IC 
individualizing the card and a recognition program R/VC for recognizing the validity 
code VC. Furthermore, a radio-controlled calendar clock 21 is integrated into the 
reading/writing device. After pushing the card 1 into the device 2, the codes IC and VC 
are decoded by the programs R/IC and R/VC and the period of validity of the card, 
determined from the validity code VC, is compared with the calendar database Date by 
means of a comparison program 22 provided in the device 1 . In the event that the card 
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is invalid, the card is rejected NA via the path N. In the event that the card is valid, the 
reading/writing program for the memory area 13 is activated via path Y. 

Furthermore, it may be provided that, once the card 1 has been pushed into the 
device 2, a personal identification number of the card holder PIN is entered into the 
5 reading/writing device via a keyboard, the authorization for card use being checked by 
means of a comparison program 24. 

As can be seen from Fig. 2, the reading/writing device 2 further has a program 25, 
which by processing the extension password VEC, entered for example via the' 
keyboard, with the code VC and/or IC, generates a new validity code nVC, which is 
10 written to the memory area 12. 

The reading/writing devices according to Figs. 1 and 2 may be all-in-one devices which 
allow both use of the card (as in Fig. 1) and revalidation (as in Fig. 2). In the event 
that they are separate devices, the elements respectively not emphasized need not be 
present. 

15 In the case of an authorized amount of use defined by the intensity of use, according 
to Fig. 3 the database CV is provided for the determination of the residual validity of 
the card 1 in a memory area 12a of the card. The reading/writing device 2 contains a 
recognition program R/CV for the code CV, which characterizes the amount of use 
used up so far. With every use of the card, the code CV is atjhe same time updated - 

20 as indicated by arrow 30 - by the reading/writing program 23. The revalidation takes 
place in a way corresponding to Fig. 2. 
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